I\'m trying to set a Cookie in a XSS request using XMLHttpRequest.
I found the XMLHttpRequest Specification, and section 4.6.2-5 does seem to suggest that setting Co
If you set the cookie using document.cookie then when you send the request the cookie header will include it.